Data Protection

Data Protection Notice for Applicants

1. Introduction

Dolder Hotel AG (hereinafter referred to as “DHAG”) and Dolder Eis & Bad AG (hereinafter re-ferred to as “DEBAG”) provide applicants with the following information, in particular with re-gard to the processing of their personal information, the purposes of its use, the recipients of disclosure and the rights of applicants with regard to the processing of their personal infor-mation. “Processing” means any operation involving personal information, such as collection, entry, organisation, ordering, storage, adaptation, alteration, retrieval, use, disclosure, transmission, dissemination, archiving, erasure or destruction.

All information and details relating to, or which can be associated with, an individual appli-cant are considered personal information (hereinafter referred to as “Personal Data”).

2. Data controllers

The data controllers responsible for the collection and processing of Personal Data in accord-ance with data protection legislation are:

Dolder Hotel AG
Kurhausstrasse 65
PO Box 1774
8032 Zurich
Switzerland

Dolder Eis & Bad AG
Adlisbergstrasse 36
8044 Zurich
Switzerland

DHAG and DEBAG determine the purposes and means of processing Personal Data and are responsible for the processing and use of Personal Data in accordance with this notice and applicable law. If you have any data protection concerns or questions about how we process Personal Data, please contact us at: hr@dolderhotelag.com or privacy@dolderhotelag.com.

3. Sources of your Personal Data

As a rule, we collect most of your Personal Data directly from you. However, it is also possible that we may receive Personal Data about you from a third party (for example, to obtain a ref-erence from you, if we have your consent, or to obtain a criminal record check).

4. Types of Personal Data we process

During the application and recruitment process, we will generally only process the infor-mation and details about you that are necessary for the recruitment and, where applicable, the employment process. This may include, if you choose to provide it to us, sensitive Person-al Data such as information about your health or religious or spiritual beliefs. As a rule, we will process the following Personal Data about you – if you provide such data to us:

Personal Data and contact information: This includes, but is not limited to, first name and last name, residential address, tele-phone number, email address, age, date of birth, gender, marital status, photograph, place of birth, nationality, military status, information about past criminal convictions, debt collection proceedings, work or residence permits.
Information relating to the drafting of the contract and employment (at the time of hiring): This includes, but is not limited to, job description, start and end dates, position, super-visor, employment contract, employee number, initials, correspondence with you, infor-mation about any special health, religious or other needs related to the workplace and work, telephone conversations and other data related to the use of communication sys-tems, login data, directory data and account data of DHAG’s systems, and other infor-mation related to various applications.
Applications, training, apprenticeships and qualifications: This includes, but is not limited to, training and diplomas, references and interim certifi-cates, curriculum vitae and other application documents.
Salary, payments and other remuneration (if hired): This includes, but is not limited to, bank details, base salary, bonuses, other remunera-tion and statements.

5. Purposes of processing Personal Data

We process your Personal Data exclusively for purposes related to the recruitment process with you and, in case of employment, for the preparation of the employment contract and the hiring formalities and procedures. This includes, but is not limited to, the following purposes:

Checking application documents and suitability of employees, including reference checks, background checks where necessary for the position.
Personnel administration: Hiring formalities and processes.
Establishing and fulfilling the employment contract and related obligations: This includes, for example, employment references, employment and interim certifi-cates, terminations, qualifications, career planning, insurance, social security, pension plans and reporting to government authorities.
Other purposes as specified in separate disclosures or as appropriate in the circum-stances

(collectively referred to as “Purposes”).

6. Legal basis for processing your Personal Data

We process your Personal Data for the purposes set out above on the following legal grounds:

a) for the conclusion and performance of the employment contract and related contracts, including the assessment of work capacity and background checks (to the extent neces-sary and legally permitted); or

b) to fulfil a legal obligation, including labour law and social security obligations; or

c) to exercise rights under labour law or social security, in particular with regard to the processing of special categories of Personal Data, such as the processing of data relat-ing to criminal convictions and offences; or

d) to review data that the employee has obviously made public on their own (e.g., in the media and social networks).

7. Recipients of Personal Data

We will only disclose your Personal Data to those entities or provide access to third parties that need the data to perform their functions. This also includes Personal Data generated by employees themselves, such as email correspondence.

We will generally disclose your Personal Data to the following categories of third parties who process the Personal Data on our behalf for the aforesaid purposes or for their own legitimate purposes on a lawful basis:

a) service providers, such as IT companies that have access to IT systems, external storage providers or outsourcing partners; namely

*1 only in the case of employment for the purposes of drafting the contract and the hiring process.

Application/Company	Categories of Personal Data	Purpose
Abacus / Fidigit *1	First name, surname, address, contact details, salary details, date of birth, position/length of employment, private email address	Performance of contracts and services, salary payments; social security
CV Manager (online application form)	First name, surname, address, contact details, CV, certificates	Recruitment
Helsana Versicherungen AG *1	First name, surname, address, contact details, salary details, date of birth	Social security benefits
Hotela *1	First name, surname, address, contact details, salary details, date of birth, position/length of employment	Social security benefits
Solida Sozialversicherungen AG *1	First name, surname, address, contact details, salary details, date of birth, position, accident data	Social security benefits
Tenfold *1	First name, surname, business email address, date of birth, clothing size, length of employment, position	Resource and authorisation management

b) Local, national and foreign authorities and agencies

(collectively referred to as “Recipients”).

Recipients are obliged at all times to comply fully with the obligation of confidentiality and applicable data protection legislation and shall implement appropriate technical and organi-sational measures to secure Personal Data and protect it against unauthorised or unlawful processing, accidental loss, alteration, disclosure or access.

8. Transfer of Personal Data to third countries

DHAG/DEBAG generally processes and stores Personal Data on servers located in Switzerland. If necessary and permitted by law, we may also transfer your Personal Data to recipients lo-cated outside of Switzerland and the European Economic Area, to a country that does not provide adequate data protection. When Personal Data is transferred to a country that does not provide adequate data protection, we will ensure adequate protection through the use of appropriate safeguards, such as those based on the EU Standard Contractual Clauses or bind-ing internal data protection policies.

Questions regarding such transfers of data and the specific safeguards applied in a particular case may be directed to the contact person listed above.

9. Retention period for Personal Data

DHAG/DEBAG will only retain Personal Data for as long as necessary for the purposes for which it was collected. We only accept applications via the online form (see CVManager).

Once the purpose for which we have received your data has ceased to exist, it will be auto-matically erased. Erasure will normally take place three months after a decision has been made, at a maximum six months afterwards. You have the option of consenting to a longer retention period for the purpose of future applications (talent pool).

Applications sent by email will be deleted immediately and applications sent by post will be destroyed or returned.

10. Your rights

You have the right to obtain information about your Personal Data that we process. You also have the right to ask us to rectify, erase or restrict your Personal Data and to object to its processing. In certain cases, you also have the right to obtain the data generated during the use of online services in a structured, commonly used and machine-readable format (data portability), allowing further use and communication. Where the processing of Personal Data is based on your consent, you may withdraw your consent at any time with effect for the fu-ture (i.e., without affecting the lawfulness of the processing prior to the withdrawal).

Inquiries and requests relating to these rights or other issues associated with data protection should be directed to the above contact person (hr@dolderhotelag.com or privacy@dolderhotelag.com).

If you believe that DHAG/DEBAG has violated data protection regulations, you have the right to lodge a complaint with the competent supervisory authority. In Switzerland, this authority is the Federal Data Protection and Information Commissioner (Eidgenössische Datenschutz- und Öffentlichkeitsbeauftragte, EDÖB). The contact details can be found at the following link. For EU countries, this would be the relevant authority in the respective country, and the con-tact details can be found at the following link.

11. Security

DHAG/DEBAG has implemented technical and organisational measures to ensure the security of Personal Data and to protect such data against unauthorised or unlawful processing, accidental loss, alteration, disclosure or access.

12. Changes to this employee notice

DHAG/DEBAG may amend this employee notice at any time without prior notification.
For further information, please refer to the general privacy policy of Dolder Hotel AG – Data Protection Policy